CVE-2005-1671

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive...

CVE-2005-1671

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive...

CVE-2005-1671: Undefined Security Weakness

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive...

CVE-2005-1618

The CVE-2005-1618 entry describes a DoS in Yahoo! Messenger (YMSGR URL handler) for versions 5.x–6.0. A room login/join packet containing a colon and ampersand can cause Messenger to send a corrupted packet to the server, triggering a disconnect. Concrete impact is denial of service; exploitation...

CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

CVE-2005-1618: Undefined Security Weakness

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service

source: https://www.securityfocus.com/bid/13626/info Yahoo! Messenger is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote user can cause Yahoo! Messenger to disconnect through malicious emails or web pages. This issue is reported ...

Yahoo! Messenger 5.x6.0 - URL Handler Remote Denial of Service

Yahoo! Messenger 5.x6.0 - URL Handler Remote Denial of Service source: https://www.securityfocus.com/bid/13626/info Yahoo! Messenger is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote user can cause Yahoo! Messenger to disconnect...

CVE-2003-1135

CVE-2003-1135 concerns Yahoo! Messenger 5.6, where a buffer overflow in the sendfile handling can be triggered by a crafted file send request containing a large number of percent characters after the Yahoo ID. The issue is described as a denial of service (crash). Connected sources consistently i...

CVE-2003-1135

Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service crash via a file send request sendfile with a large number of "%" percent characters after the Yahoo ID...

CVE-2003-1135: Undefined Security Weakness

Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service crash via a file send request sendfile with a large number of "%" percent characters after the Yahoo ID...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0737

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...

ICUII 7.0 - Local Password Disclosure

/ ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions Procuder: Cybration - www.icuii.com Vulnerable Description: ICUII 7.0 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...

Trojan file issue in Musicmatch software

Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

Arbitrary file overwrite possible by Musicmatch ActiveX control

Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Important Author: Robert Fly - [email protected] Advisory URL:...

Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch

Hyperdose Security Advisory Name: Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0875

CVE-2005-0875 affects the Yahoo plug-in for Trillian versions 2.0, 3.0, and 3.1. The issue is caused by multiple buffer overflows that allow a remote web server to crash the application (DoS) by sending a long string in an HTTP/1.1 response header. The NVD entry documents this as a denial-of-serv...